Perhaps this problem can be solved somehow, but the alternatives have their problems.
I think if you are a business you should choose technology that allows you to be compliant with the law.
Unless the law violates personal liberty, which GDPR does.
I am very curious if you can pinpoint what exactly from it violates personal libery.
It's a cookie cutter rule that restricts contract liberty to create more regimented social interaction.
People should realize that writing a law on a piece of paper doesn't make it real or enforceable
It's a bit like cryptocurrencies and banks. Because it becomes such a big burden for banks (to prove that the money obtained by selling crypto is not related to funding terrorism, crime, etc.), many banks simply refuse service to customers dealing with crypto. Either closing accounts, freezing money, or whatever.